JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.75.166.225

106.75.166.225 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 16%: ?

16%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Fixed Line ISP
ASN	AS58466
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Ningbo, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.75.166.225

Whois 106.75.166.225

IP Abuse Reports for 106.75.166.225:

This IP address has been reported a total of 53 times from 19 distinct sources. 106.75.166.225 was first reported on February 18th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 WMK965	2026-07-13 20:21:14 (2 weeks ago)	106.75.166.225 - - [14/Jul/2026:04:21:10 +0800] "\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x7F\x03\x01NUL ... show more 106.75.166.225 - - [14/Jul/2026:04:21:10 +0800] "\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x7F\x03\x01NULL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 154 "-" "-" "-" 106.75.166.225 - - [14/Jul/2026:04:21:11 +0800] "\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x7F\x03\x01NULL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 154 "-" "-" "-" 106.75.166.225 - - [14/Jul/2026:04:21:13 +0800] "\xFF\x00\x00\x00\x00\x00\x00\x00\x00\x7F\x03\x01NULL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" 400 154 "-" "-" "-" show less	Port Scan Web App Attack
🇹🇼 tyetriiix	2026-07-01 22:45:18 (4 weeks ago)	Wazuh Alert Evidence: Jul 01 22:45:15 ms1.triiix.info postfix/smtpd[679387]: warning: unknown[106.75 ... show more Wazuh Alert Evidence: Jul 01 22:45:15 ms1.triiix.info postfix/smtpd[679387]: warning: unknown[106.75.166.225]: SASL NTLM authentication failed: Invalid authentication mechanism, sasl_username=(unavailable) show less	Brute-Force
🇹🇼 joehorn.tw	2026-06-13 13:07:35 (1 month ago)	2026-06-13T21:07:34.042025+08:00 DevOps postfix/smtpd[2177060]: lost connection after STARTTLS from ... show more 2026-06-13T21:07:34.042025+08:00 DevOps postfix/smtpd[2177060]: lost connection after STARTTLS from unknown[106.75.166.225] 2026-06-13T21:07:34.042609+08:00 DevOps postfix/smtpd[2177056]: lost connection after AUTH from unknown[106.75.166.225] 2026-06-13T21:07:34.042685+08:00 DevOps postfix/smtpd[2177056]: disconnect from unknown[106.75.166.225] ehlo=1 auth=0/1 unknown=0/1 commands=1/3 ... show less	Email Spam
🇨🇳 WMK965	2026-06-07 00:41:11 (1 month ago)	106.75.166.225 - - [07/Jun/2026:08:41:10 +0800] "GET /version HTTP/1.1" 400 252 "-" "-" "-" 106.75.1 ... show more 106.75.166.225 - - [07/Jun/2026:08:41:10 +0800] "GET /version HTTP/1.1" 400 252 "-" "-" "-" 106.75.166.225 - - [07/Jun/2026:08:41:10 +0800] "GET /v1 HTTP/1.1" 400 252 "-" "-" "-" 106.75.166.225 - - [07/Jun/2026:08:41:10 +0800] "REQMOD icap://icap-server.net/server?arg=87 ICAP/1.0" 400 154 "-" "-" "-" show less	Port Scan Web App Attack
🇹🇼 tye	2026-06-01 22:33:08 (1 month ago)	Wazuh Alert Evidence: Jun 01 22:33:06 pico-gw1 named[3581345]: client @0xffff7c015758 106.75.166.225 ... show more Wazuh Alert Evidence: Jun 01 22:33:06 pico-gw1 named[3581345]: client @0xffff7c015758 106.75.166.225#16919 (clients1.google.com): query (cache) 'clients1.google.com/A/IN' denied (allow-query-cache did not match) show less	Hacking
🇩🇪 ghostwarriors	2026-05-19 12:50:20 (2 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇨🇳 ThreatBook.io	2026-05-17 23:28:04 (2 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/106.75.166.225	SSH
🇬🇧 PeravixGroup	2026-05-17 20:13:07 (2 months ago)	Honeypot detection: IMAP email brute-force authentication attempt on port 143. Severity: MEDIUM. Aar ... show more Honeypot detection: IMAP email brute-force authentication attempt on port 143. Severity: MEDIUM. Aaran.cloud show less	Brute-Force
🇬🇧 PeravixGroup	2026-05-17 17:03:37 (2 months ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-16 03:12:58 (2 months ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-15 23:31:24 (2 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/106.75.166.225	SSH
🇨🇳 ThreatBook.io	2026-05-12 23:53:07 (2 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/106.75.166.225	SSH
Anonymous	2026-05-12 05:51:44 (2 months ago)	Automated abuse report: malicious SMTP/IMAP activity detected by mail server.	Brute-Force Email Spam
🇨🇳 ThreatBook.io	2026-04-27 23:42:48 (3 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/106.75.166.225	SSH
🇨🇳 ThreatBook.io	2026-04-26 23:33:43 (3 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/106.75.166.225	SSH

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 176.101.194.22

🇻🇳 116.110.146.153

🇹🇼 111.70.29.132

🇦🇺 110.174.102.199

🇺🇸 98.175.41.170

🇮🇳 143.244.143.91

🇭🇰 101.32.76.220

🇫🇷 91.231.89.171

🇺🇸 65.49.1.153

🇺🇸 64.62.156.122

🇬🇧 51.195.244.84

🇨🇳 36.139.161.140

🇧🇬 5.188.206.34

🇨🇭 2605:6400:30:f8f8:848e:fd0:9cc7:ec5d

🇧🇴 186.121.201.67

🇹🇭 184.82.165.94

🇺🇸 172.253.86.116

🇮🇳 157.245.100.169

🇨🇦 143.110.217.244

🇺🇸 104.243.42.167